Patch "drm/gma500: Fix possible out of bounds read" has been added to the 3.14-stable tree
From: <gregkh@linuxfoundation.org>
Date: 2016-06-04 20:54:37
This is a note to let you know that I've just added the patch titled
drm/gma500: Fix possible out of bounds read
to the 3.14-stable tree which can be found at:
http://www.kernel.org/git/?p=linux/kernel/git/stable/stable-queue.git;a=summary
The filename of the patch is:
drm-gma500-fix-possible-out-of-bounds-read.patch
and it can be found in the queue-3.14 subdirectory.
If you, or anyone else, feels it should not be added to the stable tree,
please let [off-list ref] know about it.
From 7ccca1d5bf69fdd1d3c5fcf84faf1659a6e0ad11 Mon Sep 17 00:00:00 2001
From: Itai Handler <redacted> Date: Tue, 3 Nov 2015 00:20:56 +0200 Subject: drm/gma500: Fix possible out of bounds read From: Itai Handler <redacted> commit 7ccca1d5bf69fdd1d3c5fcf84faf1659a6e0ad11 upstream. Fix possible out of bounds read, by adding missing comma. The code may read pass the end of the dsi_errors array when the most significant bit (bit #31) in the intr_stat register is set. This bug has been detected using CppCheck (static analysis tool). Signed-off-by: Itai Handler <redacted> Signed-off-by: Patrik Jakobsson <patrik.r.jakobsson@gmail.com> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org> --- drivers/gpu/drm/gma500/mdfld_dsi_pkg_sender.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-)
--- a/drivers/gpu/drm/gma500/mdfld_dsi_pkg_sender.c
+++ b/drivers/gpu/drm/gma500/mdfld_dsi_pkg_sender.c@@ -85,7 +85,7 @@ static const char *const dsi_errors[] = "RX Prot Violation", "HS Generic Write FIFO Full", "LP Generic Write FIFO Full", - "Generic Read Data Avail" + "Generic Read Data Avail", "Special Packet Sent", "Tearing Effect", };
Patches currently in stable-queue which might be from itai_handler@hotmail.com are queue-3.14/drm-gma500-fix-possible-out-of-bounds-read.patch